Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa
File:                     3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (raw, json)
Hash identifier:          ewfsYYBTx06fI9ZJBdkWQ9OcyfPFI+ANp/78GnZ38BE=
Subject key identifier:   FD:C8:53:80:DE:1A:F5:40:31:8E:B1:8E:58:6E:73:63:F2:64:1A:1A
Certificate issuer:       /CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F
Certificate serial:       5BCEB46E86AD116B78CCD23732D4AAE3F2AF5A
Authority key identifier: AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa
Signing time:             Sun 03 May 2026 03:00:36 +0000
ROA not before:           Sun 03 May 2026 02:55:36 +0000
ROA not after:            Sun 02 May 2027 03:00:36 +0000
asID:                     141066
IP address blocks:        103.155.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl
                          rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ce:b4:6e:86:ad:11:6b:78:cc:d2:37:32:d4:aa:e3:f2:af:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA8D66437A40D4CB7037D059FE692144FA3EE83F
        Validity
            Not Before: May  3 02:55:36 2026 GMT
            Not After : May  2 03:00:36 2027 GMT
        Subject: CN=FDC85380DE1AF540318EB18E586E7363F2641A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:d1:3b:70:45:8b:99:72:e1:76:98:a0:5b:
                    9d:8c:71:68:14:99:e0:d7:14:2b:e6:5d:92:e7:a8:
                    5e:7c:e8:98:9a:27:80:82:22:a1:5d:f0:2e:52:60:
                    5a:ce:62:1b:e6:9e:4c:05:a9:f6:4b:19:d5:a2:a4:
                    64:37:78:3b:f8:65:3d:55:93:a6:6c:de:32:5c:70:
                    4c:29:0f:01:80:e2:13:f5:7e:cd:cd:28:71:31:a4:
                    eb:81:58:b1:4b:fa:72:fe:0f:98:63:4c:9f:dd:31:
                    fe:bb:84:a1:c0:a1:bb:38:5c:e9:b7:97:4f:91:f9:
                    90:a8:9a:50:f0:94:9f:86:28:78:51:d7:53:b9:12:
                    c5:d8:b6:12:c3:9c:28:de:bb:35:42:6b:15:06:7b:
                    e5:cb:a1:50:09:5d:17:55:69:28:5d:e1:ca:d8:44:
                    ad:cd:4d:46:ee:99:67:dc:07:26:4a:98:f0:a6:0e:
                    37:3e:b0:b5:c8:ee:26:c2:7e:2a:a1:72:1d:ef:69:
                    07:90:c7:e0:6f:17:ea:66:ca:dc:aa:f8:e3:db:ac:
                    52:16:fa:f8:35:32:90:b0:5b:15:8b:b4:0a:45:71:
                    f4:d4:f5:7c:b8:68:0b:89:c1:14:4a:d0:4a:ef:34:
                    77:10:50:4c:c6:18:ba:0a:92:56:b7:fb:52:77:03:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C8:53:80:DE:1A:F5:40:31:8E:B1:8E:58:6E:73:63:F2:64:1A:1A
            X509v3 Authority Key Identifier:
                keyid:AA:8D:66:43:7A:40:D4:CB:70:37:D0:59:FE:69:21:44:FA:3E:E8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/AA8D66437A40D4CB7037D059FE692144FA3EE83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA8D66437A40D4CB7037D059FE692144FA3EE83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f6:2e:27:c2:35:fb:77:ce:90:39:c6:6e:8c:50:7c:67:de:
         a6:5e:c3:a7:1e:fb:b7:43:c9:55:0b:8e:44:07:7d:8d:1e:8d:
         cc:93:4b:91:81:a5:54:b9:25:80:ee:79:16:3a:e8:4c:f9:fa:
         08:0c:50:d7:8d:e8:34:c6:55:1f:6a:1c:84:b3:42:93:b7:cf:
         5b:c7:7d:b6:b6:51:49:a3:b5:b9:32:86:75:a7:27:ce:c0:24:
         22:de:c1:84:d6:33:04:36:12:ee:96:32:fa:d3:ef:4f:a9:78:
         0e:d4:da:30:e7:37:00:fb:67:82:39:13:37:c5:7d:89:72:0f:
         04:77:36:9c:de:5f:b4:e2:bb:7e:12:b3:7d:51:39:d7:d0:05:
         b3:52:22:d7:0a:54:b7:41:41:0c:61:5d:0a:b0:03:75:35:47:
         fe:71:d4:34:1b:d1:9f:39:c0:fc:4b:25:80:cb:8e:2a:18:36:
         bf:18:02:ee:d2:a0:ca:bb:05:b3:ed:f4:a8:30:74:82:98:2c:
         f4:44:7c:27:32:07:92:41:bf:5c:9c:0d:c3:4d:06:3c:e7:57:
         fe:9c:36:50:c3:93:c7:b4:cc:8a:95:09:65:57:36:18:b6:73:
         d3:7e:13:4e:ac:c4:fc:2f:25:93:7c:bf:ac:79:c1:1e:bc:26:
         77:c7:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:42 2026 by rpki-client